-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathChangeLog
More file actions
1645 lines (1131 loc) · 53.8 KB
/
ChangeLog
File metadata and controls
1645 lines (1131 loc) · 53.8 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
commit f1f6c413953b4948d7ae464ed9f4f51e77fcbb36
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 21:57:40 2013 +0100
Added diagram docs to .yardopts
commit 9255fe14f97d836580f924c12eaffb9182cffd9e
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 13:44:56 2013 +0100
Release 1.2.4
commit 4a75d6261a2f991666822d5b0cf629fc028915ee
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 13:44:05 2013 +0100
Static gemspec updated
commit 825334e1db04b93b9d13210ac75df8e2fdc24d62
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 13:43:15 2013 +0100
Documentation updated
commit 32b176f52c9a7aa3caf2375215c4ffa6030d5c45
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:35:07 2013 +0100
Gemspec regenerated
commit bfe69f65bb505335b02cc6362096e10c263d3a8b
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:34:34 2013 +0100
Image links in documentation changed to remote GitHub assets
commit 8f6b9754d2a95558cc2a32f4c2dd0b4d82be7a8a
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:28:53 2013 +0100
Version bump
commit f349435979ef92105fd559ca4f40078bb1919c67
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:28:40 2013 +0100
Open-uri example updated
commit 46e0836b6dc9a7dc12095ada8be7856352b88cba
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:28:29 2013 +0100
Net::HTTP#connect wrapped in IPAccess::Patches::Net::HTTP
commit 27b0545884c616d141220c5817837fb3359911f5
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 03:02:20 2013 +0100
Open-uri example simplified
commit abcfd75caed6c0768b9ed01803633577855f9400
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Dec 26 02:58:34 2013 +0100
Required Ruby version is now 1.9.2
commit cb4774148d7e1e16f9162589c39525bc13113708
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 15:00:44 2013 +0100
Readme updated
commit d026e34e862153c93e69562e72ef6bd2ab6434b9
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:50:20 2013 +0100
Added Badge to Readme
commit 7f969e0bd5c6170d356f74427377c0f0254d389f
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:46:28 2013 +0100
Readme updated
commit 1583d574540f53806e2e77ae0e6d336307b3fc60
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:43:08 2013 +0100
Release 1.2.2
commit 0455565763981f2b130bf21c741f829d19a576a0
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:37:37 2013 +0100
Added open-uri example
commit 1217456efe2d3265cbd19646342afef0619722dd
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:37:18 2013 +0100
Strict constant checks during arming
commit 80735314da159427ab4aa46504600af7bf1f8961
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 14:36:34 2013 +0100
Cosmetics
commit 3124c5884e51a270f19550efd55be5dde1ec5652
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 11:56:18 2013 +0100
Fixed bug that caused global sets to be ignored when arming some singletons
commit 00881459874a15d2c92fb372a325cf1a5aed154e
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 11:55:32 2013 +0100
Cosmetics
commit 408f9c1d21be1a4471cb4177ea55d9e20ccc6a33
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Dec 24 11:53:13 2013 +0100
Version bump
commit 5246b7f48cb1ac0bdecd2cf76b13e823806cd577
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 22:48:21 2013 +0100
Documentation fixes
commit 4f91169decac556abef26bf373f7b69bb2855e5f
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 22:34:40 2013 +0100
Manifest.txt regenerated
commit c338d3600b23442f961eda0cee528f57770291c0
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 22:33:57 2013 +0100
Moved main module from lib/ipaccess.rb to lib/ipaccess/core.rb
commit 197d9b13036990763a1b3d51c9ec76c0870cf91c
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 22:33:31 2013 +0100
Documentation updated
commit 1abc7037ac85d2bf56dd5f8fa22450ef158fefd7
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 13:02:16 2013 +0100
Generated gemspec
commit 77b1ccb98e7729fcfe43cb8147ae6e2034ec270a
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 12:56:33 2013 +0100
Checking methods relaxed
commit 4f01890f5241c7aaa50404d9b133d87da3a32bfe
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 12:43:02 2013 +0100
ChangeLog and Manifest.txt updated
commit 5c7c90b7962820c9b83a704f7faeffd461183e8d
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 12:42:22 2013 +0100
Documentation updated
commit 3d8807981890d46a0fcb0a8a0995fe74574eaea5
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 12:39:33 2013 +0100
Documentation updated
commit b1d564f65fcb34a9375acc14703176352e6c445c
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:49:34 2013 +0100
Added ChangeLog
commit e36a68cbc19e9e158eb89728f5f753b08d3865cb
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:49:24 2013 +0100
Added Gemfile
commit 56d3b2af60f8d151ccdea3874d3372718901fef0
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:49:05 2013 +0100
RSpec options updated, added .yardopts
commit 69ad58a583145eb67ccf947b6cde6a0a6e09851a
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:48:38 2013 +0100
Copyright note updated
commit f1dc4209e041613ec4360813aabacc74ecaf43c4
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:47:48 2013 +0100
Rakefile refreshed
commit 349c4f7ebae7c03235ff57e052aef7deb0577f24
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:25:51 2013 +0100
Moved some logic to ip_access_check.rb, added List::Check class
commit aeb42501586a1dc9218f07f69bd16530c027a318
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:22:25 2013 +0100
Added optional socket attribute to IPAccessDenied exception class
commit 7da56a71c0e5cf7ca7cb297a16c4d89803611dc1
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Dec 23 11:21:04 2013 +0100
Deps updated, README moved
commit aa70dcf9ff36a292d03ab9af371b0b276cdf27af
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 23:52:17 2009 +0100
Added bus for notifying objects about changes in access lists.
- Added IPAccess::Bus class which maintains the bus,
- modified IPAccess::List#core_add and IPAccess::List#delete! to trigger a bus,
- added IPAccessDenied::Aggregate exception class which transports a set of exceptions
collected during issuing calls to acl_recheck of registered objects.
commit 3600af7469157c90244e82b7ac6243f17b458f71
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 14:38:47 2009 +0100
Added some documentation about different ways to control access for patched objects.
commit da4e279553d48fa214a193d938eac246174a4020
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 13:19:04 2009 +0100
Fixed IPAccess::Patches::Net::FTP.open with a block.
commit 13b1ab75510b90612b28781c09853cee5fd16e61
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 13:18:23 2009 +0100
Added IPAccessDenied#show method and unified error describing methods.
commit b895220a5476d8884f2149964e0b3b34b180720a
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 13:17:29 2009 +0100
Changed *args to *addresses in many places.
commit 5fb4a78f6b6608f7be8263c8192f81c008f86f16
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Nov 2 13:16:48 2009 +0100
Added _reasonable variants to ghost-docs.
commit 710456f1922fae61a566ce98c42870da48ed52d7
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 23:47:00 2009 +0100
A day of love for the garbace collector.
commit 6a59685d1e2419482dd49a4d97ee094ae772cf06
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 23:42:17 2009 +0100
Reasons are now deleted when IP is removed from white or blacklist. :ashen changed to :grey.
commit b2e94bffed197c8efe7ebe9618b8362f23ea4251
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 18:47:40 2009 +0100
Added _reasonable variants of blacklisting and whitelisting methods to patches.
commit 2caef4b370e607f4f85928dab932c4c5121b23a1
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 17:54:53 2009 +0100
Added support for storing reasons of blacklisting and whitelisting.
commit 4488abe2a4b218eb7922546fb83a84dcbb7f7ef7
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 15:09:32 2009 +0100
Added custom CSS with some fixes. Also logo is now placed in documentation using CSS.
commit ac813124d347ad2c05e59007955c74af47ab193f
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 15:08:27 2009 +0100
Added phantom patching module for Net::APOP.
commit b954d685bfcf1cdea9f4c8754dd43081705b800e
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 12:25:50 2009 +0100
Fixes for Ruby 1.8 compliance.
- Calls for original class methods like Socket.for_fd are now written as ::Socket and and so forth,
- in Net::IMAP patch there is a test whether start_tls_session is defined.
commit b7413f95365495316f95e95f3f1e0d3796221edd
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 11:50:19 2009 +0100
Fixed IPv6 presentation in short form. Fixed IPAccess::List#denied_cidr return value.
commit 1569ea06f6b5d42a08556d5087bbba47b9f3bba6
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 02:05:48 2009 +0100
Started tests against Ruby 1.8 compliance.
commit 6603ccf967de5b6fc874d5df24486da24e5b8e41
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 01:34:40 2009 +0100
Documentation updated.
commit aefe88b40891671591e3b5b2eaa48d621c0f1b69
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Nov 1 01:34:07 2009 +0100
Added orig argument to IPAccess::Set#check.
commit 6bd7e47bd2ebe82e6ccaef9b6d521f225e9e1e07
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 31 22:11:47 2009 +0100
Added require 'ipaccess' to ip_access_list.rb and ip_access_set.rb.
commit 76387e74dcff6de470a302f980805376bd0296d2
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 31 22:11:05 2009 +0100
Fixed exception raising when nil is given to IPAccess.to_cidrs.
commit 9b3b7baf0b6876aa2f1af97474debdcf717c21f4
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 31 22:10:32 2009 +0100
Added some tests for IPAccess.to_cidrs.
commit 1324c52a10327d4c18ee05c453ae3e3e3d119334
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 31 21:47:40 2009 +0100
IPAccess::List.to_cidrs renamed to IPAccess.to_cidrs.
commit 3fd5392ca7adda3dd0aae1807d5633ff8416ef66
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 31 21:28:24 2009 +0100
Tested getaddress calls against known error with getaddresses and fixed IPAccess::List#to_cidrs.
commit 6529a495de45432f06dbf7732e4ba448dea113a5
Author: Paweł Wilk <siefca@gnu.org>
Date: Wed Oct 28 14:47:40 2009 +0100
Serious fixes and documentation updates regarding @opened_on_deny flag and args processing.
commit 12f967416a0b845c1436aa00ac4318f2eef30ec4
Author: Paweł Wilk <siefca@gnu.org>
Date: Wed Oct 28 01:04:00 2009 +0100
Fixes and documentation updates in patching routines.
commit 271050eb0b22ae973384eeae417e4748d0cd08b5
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 27 22:09:28 2009 +0100
Setting close_on_deny flag should be obtained from arguments before any other variables.
commit 8ad4d6bb45a70ecc0a62dce0d1279d983ad9db9c
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 27 22:05:26 2009 +0100
High-level patches for networking objects adapted to new design.
- IPAccess::Patches::ACL#try_arm_and_check_socket now sets the originator in exceptions,
- IPAccess::Patches::ACL#__ipa_singleton_hook method is now a prototype for all singleton hooks,
- added setting @close_on_deny to all initializers and class' 'new' methods,
- acl_recheck simplified in all cases (now it just calls try_arm_and_check_socket),
- added terminate methods to all patches.
commit b245d0cd9376a519542157a74b368090e6ac869a
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 13 09:07:32 2009 +0200
Documentation update.
commit 2af870c3aa4a5ed4f6cccd3ba28025637a5a8969
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 13 01:07:54 2009 +0200
Important documentation update for IPAccess::List and serious fixes.
- Described originator fetching for access checking methods,
- renamed IPAccess::List.obj_to_cidr to IPAccess::List.to_cidrs,
- fixed arguments checking for symbolic flags in many places
- it seems that using delete is not safe since some objects don't
like to be compared with symbols.
commit 97391bc782af17e2b49df3779d07d0fae87c467f
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 12 13:09:42 2009 +0200
Image with general view of classes changed.
commit d0a319f2eeb5d085d772e30cb616fa75bbdb61db
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 12 12:48:41 2009 +0200
Documentation updated for IPAccess::Set, added some diagrams and a table of states for methods.
commit 1903ba4ba6ca3527908e9e95dae9f2ab2b4eb7b3
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 12 01:35:30 2009 +0200
Access checking methods modified for better handling of originator.
commit a06e1269de366b66944cd145c7b6a5bd3914355d
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 11 02:02:47 2009 +0200
Added simple examples about fetching informations from exception.
commit bfa96feae6aaa9da61466bfbc608f92712318331
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 11 02:02:09 2009 +0200
IPAccess::Patches for sockets adjusted for new methods from IPAccess::Set.
- Invocations of access checking method now includes second argument which is the original object
that should be transported along with an exception object as the originator attribute.
commit 286b2de126f1794373fca575b995484b811f29cd
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 11 01:59:20 2009 +0200
IPAccess::Patches::ACL names' change.
- close_connection method is now called terminate,
- try_close_connection method is now called try_terminate,
- try_close_subsocket method is now called try_terminate_subsocket.
commit ed55a76a881cdd2c8f26e998deb0e36edd291f36
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 11 01:55:56 2009 +0200
IPAccess::Set seriously modified. Passing information about original object is now possible.
- added method setup_originator which takes NetAddr::CIDR and other object:
- if other object is not nil it returns it and tries to set cidr.tag[:Originator]
when the last one is empty;
- if other object is nil it tries to fetch it from cidr.tag[:Originator],
- scream! now takes address and rule separately instead of hashed pair,
- if block in checking methods evaluate to true the exception is not raised,
- checking methods use setup_originator to establish original object for tested IP,
- checking methods are passing original object to block and to scream! method,
- specialized checking methods are now protected instead of private,
- easy to use check method now takes optional object as a first argument,
- checking methods now take optional object as a last argument,
- the optional object mentioned above will be used to set up originator,
- added some documentation.
commit 479605c5148916747bbc3276fe49b82f6a7866fe
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 11 01:47:52 2009 +0200
IPAccess::List seriously changed.
- obj_to_cidr now takes optional argument :include_origins which causes that reference
to original objects is stored within NetAddr::CIDR.tag[:Originator],
- obj_to_cidr now handles hostname/IP-mask format.
commit a9253b6bab6087dccc0eff133efbfac0a3280c29
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 10 00:22:10 2009 +0200
Patching methods seriously modified.
It's now possible to use exception to fully handle denied access.
- Added IPAccess::Set::Global#to_s for better printing and inspection,
- added accessor close_on_deny:
- indicates if network object should be left opened if IPAccessDenied exception occurs,
- uses @close_on_deny added to each patched network class,
- added open_on_deny accessor which has opposite meaning then opened_on_deny,
- __ipa_singleton_hook moved to ipaccess/patches/generic.rb because may be shared,
- patched objects' constructors and singletons' initializers now take optional
argument called :opened_on_deny which tells underlying access checking methods
to not close connection-oriented objects,
- IPAccess.arm also takes optional :opened_on_deny and passes it to singleton's initializers,
- added methods close_connection and try_close_connection for uniform way of closing connections,
- try_close_connection will call close_connection if @close_on_deny evaluates to true,
- added try_close_subsocket which does the same but with passed socket,
- all patched sockets now use blocks to terminate connections (call try_close_connection),
- added example of using new flag and dealing with exceptions to display errors before
connection is terminated.
commit 7db6ab5ce2604e7edf7d540cb785659be15f0c4c
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 10 00:03:51 2009 +0200
IPAccess::Set seriously modified.
- scream! now takes argument obj, which is passed as @originator in raised IPAccessDenied,
- access checking methods now take a block and argument obj,
- if block evaluate to true then exception is not raised;
- block takes:
- IP address that matched (CIDR),
- rule that IP matched to (CIDR),
- used access list (IPAccess::List),
- tested object (depends on checking method),
- additional object that had been passed to checking method;
- scream! that raises exception is called with:
- hash of CIDR objects (:IP and :Rule),
- exception class that should be used,
- additional object that had been passed to checking method.
commit de6972bb7ffe4c5afa2a240fb3f2ada2351e5713
Author: Paweł Wilk <siefca@gnu.org>
Date: Fri Oct 9 23:45:44 2009 +0200
IPAccessDenied modified.
- The class now bases on SecurityError since it's the kind of Exception,
- added @originator accessor,
- @access_list now known as @acl (it's access set),
- added @peer_ip accessor,
- fixed message (removed unwanted space),
- added method to_s for better inspection and printing.
commit 2f991bbfab29438a0c7a929e09bfe953765bcde7
Author: Paweł Wilk <siefca@gnu.org>
Date: Fri Oct 9 23:42:00 2009 +0200
Documentation for IPAccess module updated.
commit 2d170e872df711ceae7fa089055b166438405ca8
Author: Paweł Wilk <siefca@gnu.org>
Date: Fri Oct 9 23:40:29 2009 +0200
Relations diagram updated.
commit 663e4ce27d7ad87d24de81e8a3c4f37fad28e681
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Oct 8 12:57:10 2009 +0200
Added block passing wrappers for initializers of socket handling patches.
commit 906628660d63392cd0baf39e3a70a03cf49a9db4
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Oct 8 12:56:38 2009 +0200
Indentation fixed in comments.
commit 9788199bbf9b00d5d101a80d903144002e7284d8
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Oct 8 10:26:22 2009 +0200
Documentation updated.
- Added IPAccess module description,
- some examples fixed.
commit 9882f395cca5ed63b239d851c9ce4c5eb31291f5
Author: Paweł Wilk <siefca@gnu.org>
Date: Thu Oct 8 00:37:43 2009 +0200
Namespace related fixes and documentation updates.
- Added logo and some diagrams to the documentation,
- documentation readjusted,
- some method and attributes names fixed according to new namespaces,
- added FAQ do docs subdirectory.
commit d1477b251addfb445b95b407cb1271848d31072b
Author: Paweł Wilk <siefca@gnu.org>
Date: Wed Oct 7 18:09:37 2009 +0200
BIG CHANGE: new namespaces.
- IPAccess is now a module, not a class,
- source file ipaccess/ip_access is now ipaccess/ip_access_set since it contains IPAccess::Set,
- IPAccess::Set is a class that replaces previous IPAccess class,
- there is new singleton class called IPAccess::Set::GlobalClass, which bases on IPAccess::Set,
- IPAccess::Global constant is now IPAccess::Set::Global,
- IPAccess::Set::Global is now kind of IPAccess::Set::GlobalClass,
- IPAccess::List replaces IPAccessList class,
- documentation updated and fixed.
commit 80b4560304faddcb3ccc65b72aad5879c3d09ce1
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 16:18:08 2009 +0200
Added documentation for IPAccess::Net::SMTP.
commit 51550650c5d1b480985d106586e179f7ae8f48cb
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 16:17:37 2009 +0200
IPAccess::Patches::Net::SMTP#do_start made private.
commit 5cd773353ad77020724b03ce2c19d581a549e331
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 13:43:46 2009 +0200
Fixes in the inline documentation.
commit 1446fa415fcf8702c57e6ba3ac80fcc1133cf515
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 13:43:21 2009 +0200
IPAccess#show method improved; doesn't display empty lists.
commit e750f66d77c86f89ebf52d070d348dd0caf28746
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 13:42:10 2009 +0200
The IPAccessList#show method now doesn't print "IPv4 Tree" header if none rules are on a list.
commit 8927d0e4474d4faa2538b5c05aab748d2874165e
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 13:40:56 2009 +0200
Added example of arming TCPSocket.
commit 2a3166e669f383b5bd140ea847047cf7e40bae9a
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 13:40:37 2009 +0200
Important fixes in whitelist, blacklist, unwhitelist and unclacklist methods of IPAccess::Patches.
commit 78cb0b2e9d5ee626f053c417ddcd7bb86e03d298
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 12:39:05 2009 +0200
Documentation updated for IPAccess::Net::FTP, IPAccess::Net::Telnet, IPAccess::Net::HTTP, sockets.
commit 466e01f867d2d9e01ed933ffd629952516f0eaf3
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 01:59:51 2009 +0200
Another typo fixed in docs.
commit e0f0e28901f6752b3a0264a1e3317fdc685922dc
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 01:58:44 2009 +0200
Inline documentation typos fixed.
commit af64164c423b060ea91fe845703fb77a2aa619d6
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Oct 6 01:54:59 2009 +0200
New model of rules management: direct instance methods for patched classes:
- blacklist,
- whitelist,
- unblacklist,
- unwhitelist.
commit b292544a0f0c7d426e770f19932da3f2a0742cd7
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 5 11:59:50 2009 +0200
New IPAccessList methods for easy rules administration.
- Added IPAccessList.unwhite for removing from whitelist,
- added IPAccessList.unblack for removing from black list,
- fixed inline documentation.
commit e51ad244af3d05b27ccc588cd297322935dc1dba
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 5 11:58:02 2009 +0200
Fixed resolver issue in IPAccessList.
When there was no connection the Resolv.getaddress class method responded with NoMethodError instead of Resolv::ResolvError in Ruby 1.9.1.
commit 3bc63aeb76d6b3cbaadfe415fa58ac70a3a41fca
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 5 01:06:21 2009 +0200
Method IPAccess::Net::FTP::set_socket added.
commit 7c4cce902f6fc4d6da74acc50c5e694544dbccd2
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Oct 5 00:47:43 2009 +0200
Documentation updated; added IPAccess::Net::Telnet docs.
commit 47e39fcffd001fbc4bcf51267815dccc62cbc1a4
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 4 13:54:53 2009 +0200
IPAccess::Net::HTTP::on_connect method made private.
commit 92b4ad0af56b364b08f85936668abb8b293943b3
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 4 13:54:19 2009 +0200
Serious documentation update and fixes.
commit 155af9054ec081206090f9be76e556df847605e3
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Oct 4 13:53:03 2009 +0200
Switched to Hoe 2.3.
commit f6632a634767a44de3dfb775c6b413fc2f401018
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 16:59:44 2009 +0200
Added new files to Manifest.
commit 6d2367089c6236a84fd718ca6f310288d22c6737
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 16:26:49 2009 +0200
TODO updated.
commit a7fbe3cd1ad46e1e2072c3f3618ce2dbd1ccc6c3
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 16:26:36 2009 +0200
Added ability of IPAccess::TCPServer to get IPAccess object during initialization.
commit b3a6cbbcc898f190df5e4767cb586ae6c82cb0ec
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 16:25:43 2009 +0200
Added IPAccess::TCPServer examples.
commit 817e00235d09514d7b9d4d82b171dd1be74428be
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 16:25:22 2009 +0200
Inline documentation updated in IPAccess and IPAccessList.
commit 8dafe52c7412af43c17e311059ed8105fb3ca89b
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 15:42:51 2009 +0200
Added IPAccess::Patches::Net::SMTP patching routines.
commit a98e87df806581237444de0c2bbec4f277bbfa2d
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 15:15:10 2009 +0200
Important typo fixes for IPAccess::Patches::Net::POP3.
commit 3062c50a43daa529096a1eb905ed677fd51ae0bc
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:44:58 2009 +0200
Added files required for easy inclusion of HTTPS-enabled Net::HTTP.
commit 156b09c96f81c3944f0d5a4ee539e61129b7fff9
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:37:03 2009 +0200
Added IPAccess::Patches::Net::POP3 patching routines.
commit c17c5fa1d67e18b73c0317357b1f139be65e087b
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:36:30 2009 +0200
IPAccess::Patches::Net::HTTP::acl_recheck simplified.
commit 9bbe64593cbdca279e8f9054d5ef33f9967dceec
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:35:52 2009 +0200
IPAccess::Patches::ACL::real_socket simplified.
The method now relies on duck typing instead of checking which kind is object of.
commit 4483054334c9ec4c2f83bbcfb413e97ff7b1d901
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:34:23 2009 +0200
Fixed IPAccess::Patches::Net::HTTP::on_connect().
The method now correctly calls its original version.
commit ac8a7369054b51d2e4efe64ba8e3e8d6c211bf38
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:33:17 2009 +0200
Cosmetics in comments at IPAccess::Patches.
commit 2e10d9afd5321307f08fd81fbf151e6d66a8c3b8
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 13:32:13 2009 +0200
Inline documentation updated for IPAccessList.obj_to_cidr().
commit 2d7d6441485c76be01f3c29fad460c21f20670f2
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 02:18:59 2009 +0200
Added IPAccess::Patches::ACL helper methods and modified patching routines to use it. Less messy.
- Added real_socket() to obtain real socket object from SSL-ed connections,
- added try_arm_socket() which tries to arm socket and assign given access set to it,
- added try_arm_and_check_socket() which replaces messy pieces of code,
- added try_check_out_socket_acl() and try_check_in_socket_acl() which may be used in future,
- IPAccess::Patches::Net::HTTP now uses new socket helpers,
- IPAccess::Patches::Net::FTP now uses new socket helpers,
- IPAccess::Patches::Net::Telnet now uses new socket helpers,
- IPAccess::Patches::Net::IMAP now uses new socket helpers,
- there will be less ACL double-checks (for main object and used socket)
which happened before.
commit 7115b5f62b2cf337f1de0898043bafb3ce82d19f
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 02:10:45 2009 +0200
Typo fixed in inline doc.
commit c5c6230131ce6bdeac87fa04c077c8bc59e1ba44
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 00:04:21 2009 +0200
Added IPAccess::Patches::Net::IMAP that patches Net::IMAP.
commit be36c905d2f551fff588a03bece846a855005f12
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 00:03:40 2009 +0200
Method Net::FTP::sendcmd is excluded from patching since we're not so paranoid.
commit 7c5623b29a340eed39de71019e53621d792464bb
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 00:02:38 2009 +0200
Cosmetics at patches/netaddr.rb.
commit 6a6f3c9d106273740a7e76f5857e7d16ccab9492
Author: Paweł Wilk <siefca@gnu.org>
Date: Sat Oct 3 00:02:01 2009 +0200
Code for patching all sockets by calling IPAccess.arm(:sockets) is now loaded from file.
commit 7143ab0b145d9ae1d9f068cc1666182a506970ca
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 23:56:59 2009 +0200
Cosmetics at IPAccess::Patches.
commit c1708e9bf79f8c715a4a9f7164f00d9c3247abd8
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 23:52:22 2009 +0200
Added patching support for Net::FTP class.
commit bf42a8fa73260abe2fa208f28deb3494b192660c
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 23:51:49 2009 +0200
Added SOCKSSocket patching support to IPAccess::Patches::Net::HTTP and IPAccess::Patches::Net::FTP.
commit e14e5980de70760a137987eadf492f633be8cc3c
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 23:50:38 2009 +0200
Added massive sockets patching option to IPAccess.arm.
commit 39de90b80a5e02951c86e8e7a9978f9e7e558a4a
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 21:48:42 2009 +0200
IPAccess::Patches::Net::HTTP.new() changed (overloaded again, not overwritten).
commit e2d4faf57924329e2073334c40faa4fe9fb3434f
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:42:05 2009 +0200
Added some ideas.
commit 623c2c79752697848dbf910fd3a70c0187847c01
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:41:48 2009 +0200
Serious changes in IPAccess::Patches::Net::HTTP.
- HTTP.new() variant is now overwritten not overloaded and may take acl argument,
- other class methods variants have been rewritten using define_method and wrappers for Ruby 1.8,
- initializer now sets internal ACL and takes additional, optional argument (access list),
- code reorganized.
commit ab315129501006c7fbd166c0ddf3872fd0c20962
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:34:32 2009 +0200
Cosmetics in IPAccess::Patches.
- IPAccess::Patches::Net::Telnet::acl_recheck now uses IPAccess.arm to patch internal socket,
- IPAccess::Patches::Net::HTTP::acl_recheck now uses IPAccess.arm to patch internal socket.
commit 5ac3946255ecc3dfb581c0a4fc22b72474445f27
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:26:34 2009 +0200
IPAccess.arm now returns a patched object.
commit 4746c2b63afb6d0eff7049f2fa06e4be8ff2e28b
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:25:40 2009 +0200
Serious changes in internal ACL naming conventions.
- Added IPAccess::Patches::ACL::real_acl which returns IPAccess::Global when ACL responds to nil?
- improved IPAccess::Patches::ACL::acl= setter; it sets @acl to IPAccess::Global when ACL is nil,
- changed methods of networking objects' patches accordingly.
commit ffa633a2b41d1b3a3f034316279bd30fda6b4147
Author: Paweł Wilk <siefca@gnu.org>
Date: Tue Sep 29 15:17:18 2009 +0200
Addedd IPAccess:show which calls show() for @input and @output access list.
commit 2ad6b13c39dc90ce264ee0e7d6ff98cae70ca4a1
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Sep 28 14:32:51 2009 +0200
Socket patching modules are now ready to patch singletons.
commit 3a32a86ab066cfe7f17a1c9700ef5f042918f8a9
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Sep 28 14:32:10 2009 +0200
Inline documentation updated in patching modules.
commit f6e027c593df323717f17e8760676eaeb6546e43
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Sep 28 14:31:24 2009 +0200
Added Usage section to README.
commit 1b4ab34182c048c6e1258d843630187cc13f8a9c
Author: Paweł Wilk <siefca@gnu.org>
Date: Mon Sep 28 00:09:49 2009 +0200
Serious hacks in IPAccess::Net::HTTP module.
- It now supports patching singletons (added __ipa_singleton_hook),
- doing rechecks is also supported (acl_recheck),
- method conn_address now returns IP address (serious fix),
- method on_connect was overloaded and now calls acl_recheck,
- TCPSocket object is patched when possible to handle strange situations when IP changes
or socket is patched during execution of code block inside of start().
commit a9a88453c31c7e79e06b32c323b24e34b829c67d
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Sep 27 21:56:41 2009 +0200
GlobalSet.instance changed to IPAccess::GlobalSet.instance in socket patching module.
commit 4c954d3b53fb28b6d998594a1790b80fcdb16fd0
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Sep 27 21:55:02 2009 +0200
Net::Telnet objects can now be armed individually.
Besides: IP is rechecked against ACL each time @acl is updated and socket shares ACL.
commit 15226f4594dff7185059dedaf57d98c67cabf47c
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Sep 27 21:51:49 2009 +0200
Added and fixed some examples.
commit ea34ec0b7d92c82fd7c4101a0add4ac399c6cfae
Author: Paweł Wilk <siefca@gnu.org>
Date: Sun Sep 27 21:51:18 2009 +0200
Serious changes in generic patching modules.
- IPAccess::Patches::GlobalSet renamed to IPAccess::GlobalSet
- IPAccess::GlobalSet now emulates IPAccess::Global when compared with it or when inspected
- added method IPAccess.global? and IPAccess::Global.global? which test if ACL is the global one,
- added documentation example containing arming of a single object,
- IPAccess.arm takes now the acl argument passed to __ipa_singleton_hook when arming single object.